Credits & licences
what the kit builds on.
The kit uses open-source packages and third-party services. Each keeps its own licence. The full list with versions ships as THIRD-PARTY-LICENSES.md.
01Summary
The full list is in THIRD-PARTY-LICENSES.md: every direct Dart and Flutter package of the three phone apps (from their pubspec.lock files) and the Python packages of Card Studio. The Dart packages are under MIT, BSD-3-Clause or Apache-2.0. Card Studio's reader library pyscard is LGPL-2.1-or-later; see below.
The application code of the four apps is the author's own work, licensed to you under the Envato licence you bought. No fonts are bundled in the apps.
02Main libraries of the phone apps
| Package | Used for | Licence |
|---|---|---|
| Flutter and Dart SDK | The app framework | BSD-3-Clause |
web3dart, eth_sig_util | EVM transactions and signatures | MIT |
bip39, bip32 | Recovery phrases and key derivation | BSD-3-Clause / MIT |
pointycastle | Cryptography (Argon2id, AES-GCM and more) | MIT |
ed25519_edwards, pinenacl, bs58 | Solana keys and addresses | Apache-2.0 / MIT / MIT |
wallet | Bitcoin | MIT |
reown_walletkit | WalletConnect | Apache-2.0 |
flutter_secure_storage, local_auth | Keychain / Keystore storage, Face ID and fingerprint | BSD-3-Clause |
flutter_zxing | QR code scanning (includes zxing-cpp, Apache-2.0) | MIT |
qr_flutter | QR codes | BSD-3-Clause |
provider, dio, http, fl_chart | State, networking, charts | MIT / MIT / BSD-3-Clause / MIT |
NFC is not a plugin: the card bridges are the kit's own Swift (Core NFC) and Kotlin (Android reader mode) code.
03Card Studio libraries
| Package | Used for | Licence |
|---|---|---|
pyscard | Talking to the ACR122U reader over PC/SC | LGPL-2.1-or-later |
argon2-cffi | Argon2id for card backups | MIT |
cryptography | AES-256-GCM for card backups | Apache-2.0 or BSD-3-Clause |
pywebview (optional) | A native window instead of the browser | BSD-3-Clause |
The launchers install these with pip on the first start; they are not in the ZIP. If you package Card Studio with PyInstaller and give the app to others, include the pyscard licence and follow the LGPL's terms for replacing the library.
The studio's web interface uses no external libraries and no CDN.
04Third-party services
The apps talk to public blockchain endpoints and APIs: the RPC endpoints in the brand files, mempool.space and blockstream.info (Bitcoin), Jupiter (Solana swaps), and, with your keys, 0x, 1inch, Reown, block explorers, Alchemy, Birdeye and CoinGecko. Each is used under its provider's terms. Names and trademarks belong to their owners.
NTAG and MIFARE are trademarks of NXP. ACR122U is a product of Advanced Card Systems. Apple, iPhone and Core NFC are trademarks of Apple Inc. Android and Google Play are trademarks of Google LLC.
05This documentation
Set in Geist and Geist Mono (SIL Open Font License 1.1), loaded from Google Fonts. Screenshots of Card Studio were taken from the kit itself, with its simulated reader and its built-in sample data.